Initial

.gitignore

@@ -6,3 +6,4 @@ puppet/.tmp
 puppet/.vagrant
 chef/cookbooks
 chef/.vagrant
+ansible/.vagrant

.gitmodules

@@ -0,0 +1,3 @@
+[submodule "ansible/provisioning/ansible-ssh-hardening"]
+	path = ansible/provisioning/ansible-ssh-hardening
+	url = https://github.com/hardening-io/ansible-ssh-hardening

ansible/README.md

@@ -0,0 +1,47 @@
+# Example Ansible Hardening
+
+Demonstrates the use of the hardening roles via Ansible to increase the security of your server. It also captures the best practice for using multiple hardening modules.
+
+## Modules
+
+This playbook installs the following on your server:
+
+- [ansible-ssh-hardening](https://github.com/hardening-io/ansible-ssh-hardening)
+
+## Prerequisites
+
+Install [Ansible](http://docs.ansible.com/intro_installation.html) on your workstation.
+
+## Usage 
+
+The is kept as simple as possible. With just two commands you are able to harden your server in less than 5 minutes.
+
+```bash
+# download this repository
+git clone https://github.com/hardening-io/hardening
+
+# change to the ansible-directory
+cd hardening/ansible/provisioning
+
+# add your to be hardened host to the inventory file
+
+# run the playbook
+ansible-playbook playbook.yml -i inventory
+```
+
+
+## Usage with Vagrant
+
+Just fire up vagrant:
+
+```bash
+vagrant up
+```
+
+That's it. Enjoy testing your box via:
+
+```bash
+vagrant ssh ubuntu-trusty
+```
+
+

ansible/Vagrantfile

@@ -0,0 +1,19 @@
+# -*- mode: ruby -*-
+# vi: set ft=ruby :
+
+Vagrant.configure("2") do |config|
+
+  # Ubuntu
+  config.vm.define "ubuntu-trusty" do |c|
+    c.vm.box = "ubuntu/trusty64"
+    c.vm.network :private_network, ip: "192.168.33.44"
+
+    c.vm.provision :shell, inline: "apt-get update"
+    c.vm.provision "ansible" do |ansible|
+    ansible.playbook = "provisioning/playbook.yml"
+    ansible.inventory_path = "provisioning/inventory"
+    ansible.sudo = true
+    end
+  end
+
+end

ansible/provisioning/inventory

@@ -0,0 +1,2 @@
+#ubuntu-trusty ansible_ssh_host=192.168.33.44 ansible_ssh_port=22
+zufallsheld ansible_ssh_port=222 ansible_sudo=true

ansible/provisioning/playbook.yml

@@ -0,0 +1,5 @@
+---
+- hosts: all
+  roles:
+    - ansible-ssh-hardening/roles/ansible-ssh-hardening/
+